By default the Intune App Protection policy is enabled during creation. When the policy that is enforced on users’ devices is disabled, the user assignment is retained in the ZENworks Database but removed in the Azure portal. Subsequently, the policy is removed from the devices. Also, you will not be able to enforce a disabled policy to a user’s device.
To disable a policy:
Click the Policies tab.
Select the checkbox next to the policy that you want to enable.
Click Action > Disable Policies.
When a disabled policy is enabled, the user assignment of the policy in ZENworks is restored. To enable the disabled policy:
Click the Policies tab.
Select the checkbox next to the policy that you want to enable.
Click Action > Enable Policies.